How would you protect files of a VPS (Virtual Private Server) from snooping by the service provider?
3 points
So how do you decrypt the LUKS vault when you have no sshd running as that thing is not up yet?
4 points
you can but an ssh server in your initramfs.
dropbear-initramfs i guess was the name in debian.
1 point
*
Do VPSs typical give you LOM? Honest question. Maybe LUKs isn’t good if you can’t console in.
5 points
LUKS, or anything that relies on the server encrypting, is highly vulnerable (see schizo@forum.uncomfortable.business’s response).
Your best bet would be encrypting client side before it arrives on the server using a solution like rclone, restic, borg, etc.
2 points
1 point
1 point
